Exposures › CVE-2025-30066

CVE-2025-30066

Severity
high · on CISA KEV actively exploited
Source
CISA-KEV · kev
Published
2025-03-18
Reference
⌖ exploited in the wild shame 50/100 exploited-in-wild

tj-actions/changed-files GitHub Action contains an embedded malicious code vulnerability that allows a remote attacker to discover secrets by reading Github Actions Workflow Logs. These secrets may include, but are not limited to, valid AWS access keys, GitHub personal access tok

Players implicated

tj-actions · vendorchanged-files GitHub Action · product

Description

tj-actions/changed-files GitHub Action contains an embedded malicious code vulnerability that allows a remote attacker to discover secrets by reading Github Actions Workflow Logs. These secrets may include, but are not limited to, valid AWS access keys, GitHub personal access tokens (PATs), npm tokens, and private RSA keys.

Affected FedRAMP products 0 in the catalog

No correlated FedRAMP products.